In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conversations start, and decisions get made that later affect chain of custody, privilege, and how regulators judge the process.
Gadsby walks through four mistakes. Treating an investigation as a technical problem instead of a business event. Losing track of where sensitive conversations happen. Assuming you know who is receiving information. Limiting chain of custody to devices and logs while ignoring findings, interviews, and executive communications. She points to SEC penalties since 2021, more than $2 billion across over 100 financial firms, as proof of what happens when records go missing.
Her guidance covers naming an incident commander, choosing communication channels with an audit trail, verifying participants, and documenting decisions as they are made.
Download report: How security controls perform in practice